CVE 9.6 CRITICAL

CVE-2025-63532_CVE-2025-63532

9.6 / 10
CRITICAL
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N

Description

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass authentication and gain unauthorized access to the system.

AI Analysis

SQL injection vulnerability allowing arbitrary SQL code injection and unauthorized access

Basic Information

ID CVE-2025-63532
Source mitre
Published Dec 1, 2025 at 00:00
Modified Dec 1, 2025 at 18:26

Affected Product

Vendor Shridharshukl
Product Blood Bank Management System
Version 1.0
Affected Versions n/a n/a n/a

CWE Classification

AI Assessment

AI Score 9.6 / 10
AI Severity Critical
Vendor Shridharshukl
Product Blood Bank Management System
Version 1.0

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.